because pfSense is inaccessible from WAN, I had to VNC into your VM and increase a rule to allow my Laptop to connect with it from WAN. Following that, setup was nearly similar to establishing on bare steel.
should https://macktechbiz.com/blogs/news/unleashing-the-power-of-micro-appliance-pc-firewalls-a-revolution-in-open-source-firewall-solutions-with-zenarmor-and-opnsense-support